Skip to main content

Classifieds Scam

Here's an actual scam attempt that I encountered. The pattern is similar and looks believable. The general steps:
  1. Scammer will signify interest in purchasing item.
  2. Scammer will say he is working for some non-profit and wants to buy the item for a fiance who is in South Africa. He will ask you to calculate the shipping cost via Fedex and will say he plans to pay by PayPal.
  3. Once you give the shipping cost, he will ask for the email where he will send the PayPal payment.
  4. He will then say he will make the payment now and ask you to check your email for the PayPal.
  5. You will receive an email from service@paypal. If you are using Gmail, this will likely be flagged as a phishing email in the Spam folder. Notice that the email will have typos and will ask that you send the tracking number to ppalonlinecare@mail2consultant.com or something other than paypal.com. The general content of this bogus email is that this is a new PayPal policy and that the funds will only transferred to you once the shipment tracking number is submitted.
  6. He will then say he has made the payment and it has been deducted from his account and that you should ship the item and send to PayPal the tracking number.
  7. If you ignore him, he will ask what is causing the delay in shipment and that the money has been deducted from his account already.
Here's the actual email exchange:

I posted an ad to sell my iPad on Sulit OLX and I got an inquiry asking if the item is still available. I said yes and he replies:
From: Micheal San Filippo
I'm glad to hear from you.My name is Micheal San Filippo. i work with United Nations and i want to buy the item for my Fiance she just travel to south Africa for missionary.

Am okay with your price and i will be including the shipping cost via FedEx.

calculate the total amount with the item and get back to me. i will be paying you via paypal payment

I ask him what the shipping address is and he replies:
From: Micheal San Filippo  
here is the shipping address bellow

Name. Onunkwo Anthony Emeka
Address. Toulon building Sunny-side
city. sunny-side
state. Pretoria
Zip code. 0002
Country. South Africa

I tell him the quote and he replies:

Okay sound good. get back to me with your paypal email address so that i can make the payment as soon as possible

I give him my email and he replies:

Okay. thanks for getting back to me with your paypal email address. i will make the payment now and let me know as soon as possible you have receive payment notification mail from paypal and i will get back to you

You'll receive several emails from service@paypal. This is email #1:

Subject: ***Notification Of An Instant Payment From Micheal San Filippo(michealsanfilippo@gmail.com) Approved

Dear       dfadfa@gmail.com

You have an Instant Payment of P13,830.80 PHP  from Micheal San Filippo (michealsanfilippo@gmail.com)

Payment Details

Purchased From: dfadfa@gmail.com,

Transaction ID: 36427630DM419481W   

Email #2

Subject: ***SHIPMENTS TRACKING NUMBER IS NEEDED IMMEDIATELY***

Dear  dfadfa@gmail.com
We received a message from you regarding the payment that was made by MICHEAL SAN FILIPPO  "(michealsanfilippo@gmail.com) today  which has not appeared in your PayPal  account . In answer to this, we want you to know that the payment is already pending in your account but will not be visible to you until we receive  your response to the payment  that  was made by the buyer of the item. This is due to the new policy of PayPal So we strongly advise  you to ship the item to the buyers address giving to you  and send the Scanned Receipt and the TRACKING NUMBER  to prove that you send the item in less than 48 hours so that we can release the money in to your account.
We want you to know that as soon as we receive the tracking number/reference tracking number that was requested from you, the money will be credited to you account within the next 24 hours of your response to the payment.
Ensure you get back to us because we do not want any delay in crediting your account.
For response email us at ppalonlinecare@mail2consultant.com

Thank you for using PayPal!
The PayPal Team
Email #3

Subject: You've Made A sale - Please Ship Out The Items(s) Sold To Micheal San Filippo

Please follow these 2 easy steps to confirm the order and complete this sale

Step 1. Pack your Order

Be sure to package the item correctly. Use a sturdy package such as a padded envelope, CD mailer, or cardboard box . When appropriate, protect the item(s) with packaging material such as bubble wrap, foam peanuts , or crumpled newspaper.

If you are using your own label, be sure that it is legible. Use a printed label, or address the package by hand using large, block letters but you are advised to take the item to the shipping company office your self so as to make a safe shipment.

Please use your address as the return address.

Step 2. Ship Your Order

You are required to mail this package no later than the next 48 hours . Failure to comply may result in loss of shipping allowance, poor seller rating or suspension of seller privileges.

Shipping Method: FedEx  Express Mail Service
Email #4:
Subject: *** Payment Is Confirmed *** Shipping Details Is Required Before We Post Funds Into Your Account ***

PayPal is your partner in transaction on line

Dear Customer, dfadfa@gmail.com,
         
This message is originated from PayPal company.We have received an order from our client Micheal San Filippo  regarding the payment of   P13,830.80 PHP, that was made to your PayPal account.The payment has been successfully made but due to security reason we have to receive the shipment tracking number before the next 24 hours for the processing of your order.

This a new measure we are taking to protect both our sellers and buyers against fraudulent customers.Once you have shipped the item, send us the shipment tracking number for verification after the number has been verified, your account will be credited instantly. 

This PayPal® payment has been deducted from the buyer's account and has been "APPROVED " but will not be credited to your account until the shipment reference/tracking number is sent to us for shipment verification so as to secure both the buyer and the seller.Below are the necessary information requested before your account will be credited. Send tracking number to us  through this mail :  ppalonlinecare@mail2consultant.com

Scammer will now follow up the shipment from you:

Hello, i have made the payment PHP 13,830.80, and the money have been deducted from my Paypal account and have gotten the payment confirmation mail from Paypal please kindly check your Paypal email address dfadfa@gmail.com inbox and spam inbox
you should have gotten the payment  notification mail from Paypal

here is the shipping address bellow

Name. Onunkwo Anthony Emeka
Address. Toulon building Sunny-side
city. sunny-side
state. Pretoria
Zip code. 0002
Country. South Africa

A few hours later he will follow up again:
what is still causing the delay for you to ship out the item i have made the payment and the money have been deducted from my paypal account . please kindly ship out the item today and get back to paypal with the shipment tracking number and scan receipt for the verification of shipment so that paypal will release all the money into your account immediately.

Hope to hear from you soon.........

The best thing you can do at this point is go back to all the emails and report it as Phishing in Gmail so that the email address or content is blocked for other users. You will notice the scammer doesn't attempt to negotiate or ask details about the item being sold.

Comments

Post a Comment

Popular posts from this blog

iReport Default Date Parameter

If you want to set a default date for a jasperreports parameter, you can enter the following in the default value expression of the parameter. new Date() However, if you wanted the default to be relative from today, for example, 3 days ago, you will need to do go outside of the standard java date libraries (Date, Calendar) because JR parameter does not allow you to have multiple statements. You can write your own utility package or you can use Joda , a replacement library for the JDK date and time library. To use Joda in iReports, you need to extract the jar file and add it to Options -> Classpath. You may also drop the jar file in iReports' lib directory. You will also need to add this library to your application or report server. For setting a default date 5 days prior from today, use this: new org.joda.time.DateTime().minusDays(5).toDate() or this if you want the time part set to the beginning of the day: new org.joda.time.LocalDate().toDateTimeAtStartOfDay().minusDays(5).to...
5 comments
Read more

Your car key remote got wet, what now?

My car key fell into a street drain where it lay there for at least 5 minutes before somebody was able to fish it out. The first thing you need to do is remove the battery and dry out the electronic parts. I used tissue paper to blot out all visible moisture. When everything appeared to be dry, assembled the key back and tried to open the car. Fortunately, it worked. A couple of hours later, it didn't work anymore. When I checked the battery again, there was a little water and it appeared that there was still moisture inside the casing. The best thing to do here is to find silica gel or a dessicant which you can find inside new shoes or bags. If you can't find any, you can go to a supermarket and buy a pack of rice crackers. I knew One One Rice Crackers had a large pack of dessicant inside. That's the one on the left below. I found the one on the right from a Case Logic bag. Just pack these together with the electronic component of the car key in plastic bag. Seal it and...
2 comments
Read more

Activating NDD on your Globe landline

NDD and IDD is not available by default on your new Globe landline to protect you from inadvertent charges due to calls to mobile phones and long distance numbers. Note that these instructions are for Metro Manila accounts. To activate NDD, you need call 730-1000. The problem is, an Interactive Voice Response (IVR) menu greets you at that number and there is no menu option to activate NDD. There is also no easy way to get to a human in the options. For credit card companies, I always use the "Report a lost card" option to reach an agent immediately. It appears there is no such shortcut with Globe's number. After several attempts at the menus, the way I got to an agent was to pretend to customize my plan and select the option that says the information is not helpful. Here's the guide: 730-1000 IVR Menu: 1 - English 1 - Globelines 1 - Customize your plan 1 - Customize your plan 2 - Not helpful 1- Talk to a customer agent It will take about 3 minutes for the ...
Post a Comment
Read more